
ured side of a firewall, the firewall having a 
side and the unsecured side ; 



at least one secure communication link between the 
plurality of host machines; 
5 a filing storage system accessible by at least one 

of the plurality of host machines, the filing storage 
system having a storeroom area and a customer account 
area , wherein the filing storage system supports hard 
file links between the storeroom area and the customer 
10 account area, the hard file links comprising pointers to 

files [with a hard linking capability there between] ; 

[a firewall with] at least one secured host machine 
residing on the secured side of the firewall; and 

a customer account database located on the secured 
15 host machine and accessible by at least one of the 

plurality of host machines across a second secure [d] 
communication link through the firewall. 

2. (Once amended) The [apparatus] system of Claim 1, 
wherein the at least one secure communication link utilizes a 
20 protocol for the exchange of arbitrary sized packets of ascii 
data, delimited by carriage return and newline boundary 
markers . 



3. (Once amended) The [apparatus] system of Claim 2, 
wherein at least one secure communication link [enhances the 
25 protocol by utilizing] utilizes DES encryption [with N DES 
keys, and a method for securely passing the DES keys 
comprising the steps of: 

(i) finding the port number P used for the 
connection; 

30 (ii) computing a value I = P modulo N; and 

(iii) using I as the index into the N keys, and 

using the DES key residing at index I to encrypt and decrypt 
the data stream] . 
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6. (Once amended) The [apparatus] system of Claim 1, 
wherein the [secured] second secure communication link through 
the firewall utilizes tobj protocol. 

7. (Once amended) The [apparatus] system of Claim 1, 

5 wherein at least one of the plurality of host machines, runs a 
web server process and at least one separate one of the 
plurality of host machines, runs an ftp server process, whereby 
a customer web browser contacts the host machines. 

8. (Once amended) A method of facilitating the [high 
10 speed] transfer of data to authorized users over the 

[i]Xnternet, the method comprising [the steps of] : 

(i) running a web server process on at least one 
host machine; 

(ii) running an ftp server process on a separate 
15 host machine; 

(iii) establishing a secure communication link 
between the host machines; 

(iv) establishing [a] at least one hard link between 
storeroom file storage areas and customer account file storage 

20 areas , the at least one hard link comprising a pointer to a 
file; and 

(v) dynamically allocating customer access 
information from a secured database. 

9. (Once amended) The method of Claim 8^. wherein [step 
25 (iii) ] the establishing a secure communication link comprises 

using [uses] a protocol for the exchange of arbitrary sized 
packets of ascii data delimited by carriage return and newline 
boundary markers, and using DES encryption with N keys, step 
(iii) including the following steps: 
30 (a) finding the port number P used for the connection; 

(b) computing an index value I, where I = P modulo N; 

and 
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(c) using the DES key residing at index I to encrypt and 
decrypt the data stream. 

10- (Once amended) The method of Claim 9, wherein the 
DES encryption creates a cypher string, further comprising 
5 filtering the cypher string [and filtering is applied to 
render the cypher string at least 7-bit safe] . 

^^)r-^l?9 / 11- (Once amended) A[n] system [apparatus] for 

^ f/cilitating the [high speed] transfer or data to authorized 

users over the [i]internet^ the system/ [apparatus] comprising: 
10 a plurality of host machine mea^/fe for running a plurality 

^ of processes; 

at least one secure means foi/ communicating between the 
host machines; 

[a] file storage means hav/ng a storeroom area and a 
15 customer account area with a means for securely hard linking 
between the areas , the hard /inking comprising pointers to 
files ; 

[a] firewall means fo^r providing security between 
machines, with at least /ne secured host machine means 
20 residing on the secured^ side of the firewall; 

[a] means for da/abasing customer accounts located on the 
secured host machin^ means and accessible by a secured means 
for communicating /through the firewall. 

12. The method of claim 8, further comprising issuing at 
25 least one change root command to limit access by the 

authorized users in the customer account file storage areas. 



ft 



13. The method of claim 8, wherein the establishing at 
least one hard link between storeroom file storage areas and 
customer account file storage areas comprises creating a file 
30 pointer in the customer account file storage areas which 

points to a file in the storeroom file storage areas so that 



the file 
from the 
the file 



in the storeroom file storage areas can be accessed 
customer account file storage areas without copying 
to the customer account file storage areas. 



14. The method of claim 8, further comprising said web 
server process receiving a request from one of said authorized 
users for at least one file. 



15. The method of claim 14, further comprising said web 
server process determining whether to provide said at least 
one file by accessing a database on a host machine through a 
firewall . 



16. The method of claim 8 
server process allocating space 
storage areas for said at least 



, further comprising said ftp 
on said customer account file 
one file. 



17. The method of claim 16, further comprising creating 
a hard link on said space on said customer account file 
storage areas, said hard link pointing to said at least one 
file, wherein said at least one file resides in said storeroom 
file storage areas. 



18. The method of claim 1 
at least one of said authorized 
said customer account file stor 



6, further comprising allowing 
users to access said space on 
age areas. 



19. The method of claim 18, wherein the allowing at 
least one of said authorized users to access said space on 
said customer account file storage areas comprises issuing a 
change root command making said space a root directory for 
said at least one of said authorized users. 



